CVE-2011-1576: Buffer Overflow
Last updated 24 July 2024
Other sources
net: Fix memory leak/corruption on VLAN GRODROP
The function napireuseskb is only meant to be used for packets merged by GRO. Using it on the VLAN path will lead to memory leaks/corruption. This patch is based on Jay Vosburgh's patch, and it fixes the problem by calling kfreeskb on the VLAN GRODROP path instead of napireuseskb.
The fix for CVE-2011-1478 unveiled this issue. Note, this is not a CVE-2011-1478 regression.
Acknowledgements:
Red Hat would like to thank Ryan Sweat for reporting this issue.
— Red Hat
The Generic Receive Offload (GRO) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux 5 and 2.6.32 on Red Hat Enterprise Linux 6, as used in Red Hat Enterprise Virtualization (RHEV) Hypervisor and other products, allows remote attackers to cause a denial of service via crafted VLAN packets that are processed by the napireuseskb function, leading to (1) a memory leak or (2) memory corruption, a different vulnerability than CVE-2011-1478.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1576?
CVE-2011-1576 has been classified with a moderate severity level due to memory leak and corruption risks.
How do I fix CVE-2011-1576?
To fix CVE-2011-1576, update your kernel to the latest patched version provided by your Linux distribution.
Which versions are affected by CVE-2011-1576?
CVE-2011-1576 affects Linux Kernel versions 2.6.18 and specific versions of Red Hat Enterprise Linux 5 and 6.0.
What is the nature of the vulnerability in CVE-2011-1576?
CVE-2011-1576 involves a memory leak and corruption issue when using the napi_reuse_skb function incorrectly on VLAN paths.
Is CVE-2011-1576 applicable to Linux virtual machine environments?
Yes, CVE-2011-1576 can impact systems running Red Hat Enterprise Virtualization Hypervisor that utilize the affected Linux kernels.